This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json) Hash identifier: umHMuVR6xfUrz+HLzaD4dj/j5L7GouVrlhHYVT8ddPk= Subject key identifier: F6:13:CC:D9:F4:19:D8:DD:E7:E1:7A:A1:B8:AD:5D:1A:03:C5:11:6D Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59 Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459 Certificate serial: 019BE149A86F20B900C98AFEAF5026A76038 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft Manifest number: 0323 Signing time: Wed 21 Jan 2026 16:00:59 +0000 Manifest this update: Wed 21 Jan 2026 16:00:59 +0000 Manifest next update: Thu 22 Jan 2026 16:00:59 +0000 Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: cz2BQZUMz0RqQylGYLf4k/kHAj8dKXYZZWiOdH/ZtFA=) 2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:49:a8:6f:20:b9:00:c9:8a:fe:af:50:26:a7:60:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459 Validity Not Before: Jan 21 16:00:59 2026 GMT Not After : Jan 22 16:00:59 2026 GMT Subject: CN=f613ccd9f419d8dde7e17aa1b8ad5d1a03c5116d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:23:74:92:7c:55:a6:35:ef:49:54:47:72:fb: db:ef:fa:b2:84:3a:9b:31:2f:52:df:e2:9c:98:c7: 64:68:c8:99:17:8b:21:03:ea:07:da:b9:47:d2:2b: 18:cb:1d:8f:b0:83:b4:c4:b2:0c:a8:6e:2c:3e:d7: 40:90:5f:26:35:36:38:be:90:99:05:a1:04:4a:e4: 6a:73:ed:d8:51:bd:83:8c:dd:9f:88:c3:ed:50:fd: f4:64:7e:c6:1b:1e:23:2b:bc:97:4c:43:89:79:ee: c2:11:86:5c:58:f8:9a:b7:93:14:f9:92:80:4c:59: 5c:1e:40:04:2e:65:07:22:25:45:ed:04:0b:54:d1: c8:f0:4b:12:96:f1:af:d8:b1:15:75:48:9b:82:40: df:54:6a:70:f1:66:56:56:5d:b0:ac:d3:9d:12:d0: 6a:cc:65:9c:ca:25:ac:a0:8e:c0:89:1d:4a:b0:54: fc:61:df:db:84:15:23:56:fb:8d:16:67:3f:37:10: 3d:da:7a:f4:76:4a:cc:a8:fd:58:e4:0b:a4:b7:42: e5:d9:92:7d:49:a2:37:2c:4b:f2:66:c8:84:73:e8: b0:ce:26:88:d7:76:93:b7:60:97:cc:40:d3:76:f4: b9:61:24:af:04:0c:56:68:ea:7e:c9:63:26:41:d3: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:13:CC:D9:F4:19:D8:DD:E7:E1:7A:A1:B8:AD:5D:1A:03:C5:11:6D X509v3 Authority Key Identifier: keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:5f:25:f0:6b:1b:7a:81:46:f9:01:7d:9f:56:25:fc:71:91: b7:e7:f4:5a:10:57:26:db:4b:43:9d:04:a1:b0:84:f7:62:61: 97:9d:18:d5:1f:5e:17:91:49:1d:a3:4c:59:ba:6f:ce:9c:ca: 78:ee:a4:32:51:15:89:0c:ca:2b:f2:aa:76:c9:57:5b:1b:08: ea:16:e4:15:fa:a6:69:a4:07:86:a4:7c:eb:b2:23:6c:31:5d: 16:00:e7:93:48:87:96:52:13:2d:7a:b6:13:cf:8b:3e:84:9c: c8:6c:67:75:ca:71:cc:48:4d:bc:6a:b5:55:5e:b5:50:38:3c: 7c:38:4d:27:81:f1:a6:df:5a:5f:53:b1:7e:95:3f:9c:e3:92: de:54:72:62:37:6c:2e:3b:70:03:49:75:6b:bc:af:cc:6b:71: 3e:91:45:e2:08:12:0e:bb:22:f3:48:03:c5:41:5e:b6:4a:79: cf:a7:9b:57:c0:4b:f1:39:d6:7b:7e:3c:53:5f:73:a1:30:59: 1e:df:26:d4:99:76:90:06:31:d1:3b:7b:d5:fc:c0:d5:1e:f1: 1b:8a:fe:57:ad:49:91:5d:34:ff:5f:f6:57:89:f3:9a:37:7d: dd:94:33:10:43:85:63:bd:b9:23:b4:db:5a:81:83:19:db:b6: 03:fd:4f:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvhSahvILkAyYr+r1Amp2A4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxODE4MjJhOWNhMmEwMDhmNWNkMTFiOWY5ZGJhMTZlZTJj NjE0NTkwHhcNMjYwMTIxMTYwMDU5WhcNMjYwMTIyMTYwMDU5WjAzMTEwLwYDVQQD EyhmNjEzY2NkOWY0MTlkOGRkZTdlMTdhYTFiOGFkNWQxYTAzYzUxMTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSN0knxVpjXvSVRHcvvb7/qyhDqb MS9S3+KcmMdkaMiZF4shA+oH2rlH0isYyx2PsIO0xLIMqG4sPtdAkF8mNTY4vpCZ BaEESuRqc+3YUb2DjN2fiMPtUP30ZH7GGx4jK7yXTEOJee7CEYZcWPiat5MU+ZKA TFlcHkAELmUHIiVF7QQLVNHI8EsSlvGv2LEVdUibgkDfVGpw8WZWVl2wrNOdEtBq zGWcyiWsoI7AiR1KsFT8Yd/bhBUjVvuNFmc/NxA92nr0dkrMqP1Y5Aukt0Ll2ZJ9 SaI3LEvyZsiEc+iwziaI13aTt2CXzEDTdvS5YSSvBAxWaOp+yWMmQdO90wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYTzNn0Gdjd5+F6obitXRoDxRFtMB8GA1UdIwQY MBaAFAGBgiqcoqAI9c0RufnboW7ixhRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQt ODBkNDk0NTkxMWRkLzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQtODBkNDk0NTkxMWRk LzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAul8l8Gsb eoFG+QF9n1Yl/HGRt+f0WhBXJttLQ50EobCE92Jhl50Y1R9eF5FJHaNMWbpvzpzK eO6kMlEViQzKK/KqdslXWxsI6hbkFfqmaaQHhqR867IjbDFdFgDnk0iHllITLXq2 E8+LPoScyGxndcpxzEhNvGq1VV61UDg8fDhNJ4Hxpt9aX1OxfpU/nOOS3lRyYjds LjtwA0l1a7yvzGtxPpFF4ggSDrsi80gDxUFetkp5z6ebV8BL8TnWe348U19zoTBZ Ht8m1Jl2kAYx0Tt71fzA1R7xG4r+V61JkV00/1/2V4nzmjd93ZQzEEOFY725I7Tb WoGDGdu2A/1P5Q== -----END CERTIFICATE-----Generated at Wed Jan 21 18:47:38 2026 by rpki-client